Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File:                     wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier:          a0LR94b1bD3DjZneY/mlU00ESLAeiWZ772oxB5ZIi0Q=
Subject key identifier:   49:C0:BB:77:F1:64:58:1E:F2:0D:21:CD:6D:EB:7C:55:42:51:68:58
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer:       /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial:       0196C4275A53E15F096ABCBBBF6F1113DFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number:          134D
Signing time:             Mon 12 May 2025 11:00:35 +0000
Manifest this update:     Mon 12 May 2025 11:00:35 +0000
Manifest next update:     Tue 13 May 2025 11:00:35 +0000
Files and hashes:         1: 0I0Fa0O7Xqk8PAo5VRR9HwHSvFo.roa (hash: VDz1V6rPF+444e2I1uldEDzVvDGxCwDp5UCK6SCxm94=)
                          2: 20U7SL-48kkH7iK0DO4f8T7R21E.roa (hash: GmOKvt6kHI1bE0YH6oqXpTeejjgDh3Wthg7QwYWtufU=)
                          3: cIRs34GrM17DP76r2K4VKlnq1i8.roa (hash: gvtYS4ycN0WNeVX6nyckWypk1ijeZALWriynsiEgZyQ=)
                          4: irZgQBJdGnmucTekqqp2deRaSYE.roa (hash: exMITnVVS0zVwAaCFgSt1eOayd7B5fiXvzvzStQ9hxA=)
                          5: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: WAJEXCRG8J7L8hnvFWbH9rOYVNikHMbZ0lp4TyMMedM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:5a:53:e1:5f:09:6a:bc:bb:bf:6f:11:13:df:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
        Validity
            Not Before: May 12 11:00:35 2025 GMT
            Not After : May 13 11:00:35 2025 GMT
        Subject: CN=49c0bb77f164581ef20d21cd6deb7c5542516858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:69:70:ef:bb:48:eb:17:ea:a9:28:22:49:51:
                    0b:89:19:0c:c1:49:5a:ae:a0:95:b1:d3:f8:90:5f:
                    62:25:dd:c9:7b:f8:63:50:d7:64:09:f2:96:86:57:
                    64:d0:44:15:88:68:e2:55:0b:92:0b:04:fa:ae:38:
                    4f:e2:51:0e:68:bc:e4:c3:a0:ef:55:0d:8a:5e:32:
                    0f:77:3a:eb:21:a9:14:07:f9:b6:37:40:3a:25:f1:
                    ec:59:82:ce:c6:68:09:e9:91:a8:8a:ab:fe:c7:ef:
                    98:b4:59:ab:8c:a8:f0:06:7b:8c:d1:51:81:fc:72:
                    b5:ad:fc:00:19:44:69:68:46:3f:d1:50:c6:3e:cc:
                    f8:1e:a9:ad:0f:4e:cf:b9:89:30:a7:1d:14:6e:5f:
                    8e:c9:e3:39:70:28:6f:89:8e:2f:0e:e5:c7:92:83:
                    98:1d:d7:e0:92:53:5b:fd:cf:05:22:18:aa:2b:da:
                    ee:6e:01:fe:ec:25:ac:0e:08:79:b8:49:67:8f:74:
                    05:2c:4a:59:12:53:b7:54:8d:79:14:69:07:43:60:
                    fe:59:07:33:8d:f9:c2:5c:78:c6:6d:f3:82:8a:b6:
                    91:4f:f5:47:8f:5a:0b:d4:a8:7d:f0:09:e2:77:70:
                    fa:01:6d:f2:94:5f:03:e2:f0:ef:a2:c7:ce:2d:60:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:BB:77:F1:64:58:1E:F2:0D:21:CD:6D:EB:7C:55:42:51:68:58
            X509v3 Authority Key Identifier:
                keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:19:d1:96:a6:15:e9:4d:82:82:04:bd:d4:5e:50:f2:71:60:
         31:21:67:b4:51:34:ab:aa:b7:16:47:6d:67:62:ef:52:d2:3b:
         e0:f8:94:49:81:93:44:e0:53:00:3a:6f:91:a8:aa:1c:21:21:
         2c:83:eb:17:01:c3:a3:fc:9d:08:ea:3c:63:89:0f:2d:97:a2:
         d9:df:00:50:6c:ae:03:01:aa:c9:c2:95:98:46:bc:9f:e4:34:
         74:0f:76:ed:86:52:8d:51:91:f9:db:c7:01:88:9b:bd:0b:f2:
         b0:d7:f7:39:42:9f:80:30:c0:2e:b4:5e:57:ec:39:34:e8:9b:
         09:7a:04:19:0a:d0:41:9c:6f:6d:71:3f:e8:89:27:dd:6a:f7:
         de:3c:0b:8c:13:9c:4d:04:0e:a7:80:f7:ef:3a:94:be:2d:19:
         ab:ee:32:17:44:7d:20:7c:99:06:96:3a:ea:5d:53:55:8f:18:
         22:07:3c:30:8d:6b:61:e4:55:d0:7a:32:c0:04:2f:9c:fd:45:
         f5:d4:62:33:73:b2:77:e6:5b:6d:b6:42:d1:ed:07:d7:58:f1:
         fc:9e:33:ef:8e:3e:a9:8b:17:21:3e:80:6b:a7:f3:f0:b3:bf:
         62:bb:ff:d4:12:f1:0e:ba:99:81:8f:62:1b:77:18:e4:d0:fb:
         a3:46:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:34:12 2025 by rpki-client